General

  • Target

    760-295-0x0000000003310000-0x0000000003441000-memory.dmp

  • Size

    1.2MB

  • MD5

    2d3665e8ff10223e8b4b49b4aa8f5aaf

  • SHA1

    b590fee444aa0eecbbd7970a2c5863ae5f80dd2b

  • SHA256

    650280eaa3b2f513631eb94cccf9fa758dc02c180c6aebfe62f3ab357d2ad43a

  • SHA512

    6af26a361de53eee6ccca8fea800c19981062b088da4cd9651d19bc72526892e36dbcdebe7dea347d6c6cdf1edbe90c2c5e2d2e9b7059951896f096bfb5408c6

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAE1ftxmbfYQJZKokq:7I99DEWVtQAEZmn0R

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 760-295-0x0000000003310000-0x0000000003441000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections